Documentation
Rate This Document
Findability
Accuracy
Completeness
Readability
SubmitClose

Updating HAF Keys in One-Click Mode

Currently, the key is updated by restarting the service process. The process determines whether to update the key based on the key validity period. The update process is automated, and you do not need to perform any operation.

During the restart, the HAF process checks whether the key will expire in 30 days. If yes, the HAF process updates the key. The key expiration does not affect services. To update the key, you only need to restart the service process.

Restart the host node and offload node processes to complete the key update.

Parameter

Description

Task Name

One-click key update

Task Description

Regenerating the key of the current node

Run Directory

/

Run Command
  • On an offload node:

    Restart the haf-tool tool and the corresponding service.

    su -s /bin/bash - haf -c "haf-tool restart && haf-tool service --restart"

  • On a host node:

    Restart the main process (for example, restart the hetu process) to check whether the key needs to be updated.

Whether to Check Return Code

Yes

Expected Return Code

0

If the system has high security requirements, you are advised to periodically restart the process to update the key. This operation must be approved by customers.